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DETAILED ACTION 

1. Claims 1-35 have been examined and is pending. 
Claims 33-35 are new claims. 

2. Claims 1-8 and 17-32 previously rejected under 35 U.S.C. 101 are now 
withdrawn. 

3. This is a Final rejection necessitated by new grounds of rejection. 



Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

4. Claims 1-32 are rejected under 35 U.S.C. 102(e) as being anticipated by Roy 
(US 6,677,888). 



As per claim I.- 
Roy discloses the method for generating a shared key comprising: 
providing a first certificate from a first peer to a second peer, the first certificate 
including a plurality of first parameters , the first peer and second peer being 
communicated over a network ; (col. 10, lines 58-64; Roy discloses the certificate 
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obtained of the aircraft is the claimed 1 st certificate provided where the 
parameters being the digital signature.) 

performing a first exponentiation operation to generate a first public key from the 
second peer using at least one parameter of the plurality of first parameters and a first 
private key from the second pee r wherein the first parameters being digital signature 
standard parameters : (col.9, lines 44-60; Roy discloses generating by computing 
the public key which selects a private key and to sign a message with a known 
hash function (SHA-1) thereby obtaining a digital fingerprint of the message. The 
hash that obtains the digital fingerprint is claimed to the 1 st parameters being 
signature standard parameters.) 

providing a second certificate and the first public key from the second peer to the 
first peer, the second certificate comprising a plurality of second parameters; (col. 10, 
lines 27-32; Roy discloses the CA issues the public key certificates with domain 
parameters and the key size to determine the cryptographic strength as the 
claimed provided the 2 nd certificate and public key with 2 nd parameters.) 

performing a second exponentiation operation to generate a shared secret key 
for the second peer using at least one parameter from the plurality of first parameters; 
(col. 10, lines 48-52; Roy discusses a secret session key is established in a 
request message that sends the message with the signature as the claimed 
shared secret key using a parameter from the first parameters. The parameter 

from the first parameters is referring to signature standard parameters as claimed 
above.) 
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performing a third exponentiation operation to generate the shared secret key for 
the first peer using the first public key from the second peer and a private key from the 
first peer. (col. 10, lines 1-9) 

Roy discloses 

As per claim 2: See col.9, lines 32-35; discussing the method according to claim 1 
wherein the first certificate is a DSA type certificate. 

As per claim 3: See col.11, lines 13-16; discussing the method according to claim 
2 wherein the first and second parameters comprise a prime number p.sub.dss, a prime 
number q.sub.dss a generator g.sub.dss and a public key for the first and second peers, 
respectively. 

As per claim 4: See col.9, lines 44-60; discussing the method according to claim 3 
wherein the first exponentiation operation to generate the first public key is 
Y.sub.R=g.sub.dss{circumfle- x over ( )}X.sub.R mod p.sub.dss where X.sub.R is a one- 
time private key from the second peer. 

As per claim 5: See col. 10, lines 1-9; discussing the method according to claim 4 
wherein the second exponentiation operation to generate the shared secret key for the 

* 

second peer is .sub.SSK=Y.sub.Adss{circumflex over ( )}X.sub.R mod p.sub.dss where 
Y.sub.Adss is a DSS public key from certificate of peer A. 

As per claim 6: See col. 10, lines 1-9; discussing the method according to claim 5 
wherein Y.sub.Adss=g.sub.dss{circumflex over ( )}X.sub.Adss mod p.sub.dss where 
X.sub.Adss is a DSS private key from certificate of peer A. 

As per claim 7: See col. 10, lines 1-9; discussing the method according to claim 5 
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wherein the third exponentiation operation to generate the shared secret key for the first 
peer is Y.sub.SSK=YR{circumflex over ( )}X.sub.Adss mod p.sub.dss where X.sub.Adss 
is a DSS private key from certificate of peer A. 

As per claim 8: See FIG.1 and col.5, lines 50-60; discussing the method 
according to claim 1 wherein the first and second certificates are sent to the second and 
first peers, respectively, over a wireless network. 
As per claim 9: 

Roy discloses the article of manufacture comprising: 

a machine accessible medium including data that, when accessed by a machine, 

* 

causes the machine to perform operations comprising: (col.5, lines 30-46) 

providing a first certificate from a first peer to a second peer, the first certificate 
including a plurality of first parameters; (col. 10, lines 58-64; Roy discloses the 
certificate obtained of the aircraft is the claimed 1 st certificate provided where the 
parameters being the digital signature.) 

performing a first exponentiation operation to generate a first public key from the 
second peer using the plurality of first parameters and the first private key from the 
second peer; (col.9, lines 44-60; Roy discloses generating by computing the public 
key which selects a private key and to sign a message with a known hash 
function (SHA-1) thereby obtaining a digital fingerprint of the message. The hash 
that obtains the digital fingerprint is claimed to the 1 st parameters being signature 
standard parameters.) 
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providing a second certificate and the first public key from the second peer to the 
first peer, the second certificate comprising a plurality of second parameters; (col.10, 
lines 27-32; Roy discloses the CA issues the public key certificates with domain 
parameters and the key size to determine the cryptographic strength as the 
claimed provided the 2 nd certificate and public key with 2 nd parameters.) 

performing a second exponentiation operation to generate a shared secret key 
for the second peer using at least one parameter from the plurality of first parameters; 
(col.10, lines 48-52; Roy discusses a secret session key is established in a 
request message that sends the message with the signature as the claimed 
shared secret key using a parameter from the first parameters. The parameter 
from the first parameters is referring to signature standard parameters as claimed 
above.) 

performing a third exponentiation operation to generate the shared secret key for 
the first peer using the first public key from the second peer and a private key from the 
first peer, (col.10, lines 1-9) 

As per claim 10: See col.9, lines 32-35; discussing the article of manufacture 
according to claim 9 wherein the first certificate is a DSA type certificate. 
As per claim 11: See col.11, lines 13-16; discussing the article of manufacture 
according to claim 10 wherein the first and second parameters comprise a prime 
number p.sub.dss, a prime number q.sub.dss, a generator g.sub.dss and a public key 
for the first and second peers, respectively. 

As per claim 12: See col.10, lines 1-16; discussing the article of manufacture 
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according to claim 1 1 wherein the first exponentiation operation to generate the first 
public key is Y.sub.R=g.sub.dss{circumflex over ( )}XR mod p.sub.dss where X.sub.R is 
a one-time private key from the second peer. 

As per claim 13: See col. 10, lines 1-9; discussing the article of manufacture 
according to claim 12 wherein the second exponentiation operation to generate the 
shared secret key for the second peer is Y.sub.SSK=Y.sub.Adss{circumflex over ( 
)}X.sub.R mod p.sub.dss where Y.sub.Adss is a DSS public key from certificate of peer 
A. 

As per claim 14: See col. 10, lines 1-9; discussing the article of manufacture 
according to claim 13 wherein Y.sub.Adss=g.sub.dss{circumflex over ( )}X.sub.Adss 
mod p.sub.dss where X.sub.Adss is a DSS private key from certificate of peer A. 
As per claim 15: See col. 10, lines 1-9discussing the article of manufacture 
according to claim 13 wherein the third exponentiation operation to generate the shared 
secret key for the first peer is Y.sub.SSK=Y.sub.R{circumflex over ( )} X.sub.Adss mod 
p.sub.dss where X.sub.Adss is a DSS private key from certificate of peer A. 
As per claim 16: See FIG.1 and col.5, lines 50-60; discussing the article of 
manufacture according to claim 9 wherein the first and second certificates are sent to 
the second and first peers, respectively, over a wireless network. 
As per claim 17: 

Roy discloses a system comprising: 
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a processor; and a memory coupled to the processor, the memory containing 
program code that, when executed by the processor, causes the processor to: (col. 14, 
lines 61-67) 

provide a first certificate from a first peer to a second peer, the first certificate 
including a plurality of first parameters; (col. 10, lines 58-64; Roy discloses the 
certificate obtained of the aircraft is the claimed 1 st certificate provided where the 
parameters being the digital signature.) 

perform a first exponentiation operation to generate a first public key from the 
second peer using the plurality of first parameters and the first private key from the 
second peer; (col.9, lines 44-60; Roy discloses generating by computing the public 
key which selects a private key and to sign a message with a known hash 
function (SHA-1) thereby obtaining a digital fingerprint of the message. The hash 
that obtains the digital fingerprint is claimed to the 1 st parameters being signature 
standard parameters.) 

provide a second certificate and the first public key from the second peer to the 
first peer; the second certificate comprising a plurality of second parameters; (col. 10, 
lines 27-32; Roy discloses the CA issues the public key certificates with domain 
parameters and the key size to determine the cryptographic strength as the 
claimed provided the 2 nd certificate and public key with 2 nd parameters.) 

perform a second exponentiation operation to generate a shared secret key for 
the second peer using at least one parameter from the plurality of first parameters; 
(col. 10, lines 48-52; Roy discusses a secret session key is established in a 
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request message that sends the message with the signature as the claimed 
shared secret key using a parameter from the first parameters. The parameter 
from the first parameters is referring to signature standard parameters as claimed 
above.) 

performing a third exponentiation operation to generate the shared secret key for 
the first peer using the first public key from the second peer and a private key from the 
first peer. (col. 10, lines 1-9) 

As per claim 18: See col.9, lines 32-35; discussing the system according to claim 

1 7 wherein the first certificate is a DSA type certificate. 

As per claim 19: See col. 11, lines 13-16; discussing the system according to claim 

18 wherein the first and second parameters comprise a prime number p.sub.dss, a 
prime number q.sub.dss, a generator g.sub.dss and a public key for the first and second 
peers, respectively. 

As per claim 20: See col.9, lines 44-60; discussing the system according to claim 

19 wherein the first exponentiation operation to generate the first public key is 
Y.sub.R=g.sub.dss{circumfle- x over ( )}X.sub.R mod p.sub.dss where X.sub.R is a one- 
time private key from the second peer. 

« 

As per claim 21: See col. 10, lines 1-9; discussing the system according to claim 20 
wherein the second exponentiation operation to generate the shared secret key for the 
second peer is Y.sub.SSK=Y.sub.dss{circumflex over ( )}X.sub.R mod p.sub.dss where 
Y.sub.Adss is a DSS public key from certificate of peer A. 

As per claim 22: See col. 10, lines 1-16; discussing the system according to claim 
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21 wherein Y.sub.Adss=g.sub.dss{circumfl- ex over ( )}X.sub.Adss where X.sub.Adss is 
a DSS private key from certificate of peer A. 

As per claim 23: See col. 10, lines 1-9; discussing the system according to claim 21 
wherein the third exponentiation operation to generate the shared secret key for the first 
peer is Y.sub.SSK=YR{circumflex over ( )}X.sub.Adss mod p.sub.dss where X.sub.Adss 
is a DSS private key from certificate of peer A. 

As per claim 24: See FIG.1 and col. 5, lines 50-60; discussing the system according 
to claim 17 wherein the first and second certificates are sent to the second and first 
peers, respectively, over a wireless network. 
As per claim 25: 

Roy discloses a method comprising: 

receiving a first certificate including a plurality first parameters; (col. 10, lines 58- 
64; Roy discloses the certificate obtained of the aircraft is the claimed 1 st 
certificate provided where the parameters being the digital signature.) 

performing a first exponentiation operation to generate a first public key using at 
least one parameter of the plurality of first parameters and a first private key; (col.9, 
lines 44-60; Roy discloses generating by computing the public key which selects 
a private key and to sign a message with a known hash function (SHA-1) thereby 
obtaining a digital fingerprint of the message. The hash that obtains the digital 
fingerprint is claimed to the 1 st parameters being signature standard parameters.) 

receiving a second certificate and the first public key, the second certificate 
including a plurality of second parameters; (col. 10, lines 27-32; Roy discloses the CA 
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issues the public key certificates with domain parameters and the key size to 
determine the cryptographic strength as the claimed provided the 2 nd certificate 
and public key with 2 nd parameters.) 

performing a second exponentiation operation to generate a first shared secret 
key using at least one parameter from the plurality of first parameters; (col. 10, lines 48- 
52; Roy discusses a secret session key is established in a request message that 
sends the message with the signature as the claimed shared secret key using a 
parameter from the first parameters. The parameter from the first parameters is 
referring to signature standard parameters as claimed above.) 

performing a third exponentiation operation to generate a second shared secret 
key using the first public key and a private key. (col. 10, lines 1-9) 
As per claim 26: See col.9, lines 32-35; discussing the method according to claim 

25 wherein the first certificate is a DSA type certificate. 

As per claim 27: See col.11, lines 13-16; discussing the method according to claim 

26 wherein the first and second parameters each comprises a prime number p.sub.dss, 
a prime number q.sub.dss, a generator g.sub.dss and a public key. 

As per claim 28: See col. 10, lines 1-16; discussing the method according to claim 

27 wherein the first exponentiation operation to generate the first public key is 
Y.sub.R=g.sub.dss{circumfle- x over ( )}X.sub.R mod P.sub.dss where X.sub.R is a 
one-time private key. ^ 

As per claim 29: See col. 10, lines 1-3; discussing the method according to claim 28 
wherein the second exponentiation operation to generate the first shared secret key for 
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the second peer is .sub.SSK=Y.sub.Adss {circumflex over ( )}X.sub.R mod p.sub.dss 
where Y.sub.Adss is a DSS public key. 

* 

As per claim 30: See col. 10, lines 1-9; discussing the method according to claim 29 
wherein Y.sub.Adss=g.sub.dss{circumfl- ex over ( )}X.sub.Adss mod p.sub.dss where 
X.sub.Adss is a DSS private key. 

As per claim 31: See col. 10, lines 65-67; discussing the method according to claim 
29 wherein the third exponentiation operation to generate a second shared secret key is 
Y.sub.SSK=Y.sub.R{circumflex over ( )}X.sub.Adss mod p.sub.dss where X.sub.Adss is 
a DSS private key. 

As per claim 32: See FIG.1 and col.5, lines 50-60; discussing the method 
according to claim 25 wherein the first and second certificates are sent to the second 
and first peers, respectively, over a wireless network. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 33-35 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Roy (US 6,677,888), and further in view of Yeager, et al. (US 7,222,187). 
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As per claim 33: Roy discloses an a wireless network invention (col. 5, lines 50-60) 
that uses Elliptic Curve DSA to prevent forgery and Diffie-Hellman key agreement 
scheme (col.9, lines 33-35 and col. 10, lines 1-3). However, Roy fails to mention the 
network be one of a Bluetooth network. 

Yeager discloses Embodiments of a decentralized, distributed trust mechanism 
are described that may be used in various networking platforms, including, but not 
limited to, peer-to-peer and other decentralized networking platforms. The mechanism 
may be used, among other things, to implement trust relationships between and among 
peers and to implement trust relationships between peers and content and data (col. 2, 
lines 44-50). Roy discusses the peer-to-peer platform may be independent of specific 
security approaches where the peer-to-peer platform may provide a comprehensive set 
of security primitives to support the security solutions used by various peer-to-peer 
platform services and applications. Embodiments of the peer-to-peer platform may 
provide one or more security primitives including, but not limited to: A simple crypto 
library supporting hash functions (e.g. MD5), symmetric encryption algorithms (e.g. 
RC4), and asymmetric crypto algorithms (e.g., Diffie-Hellman and RSA) (col. 58, line 61 
- col. 57, line 4). Roy further discloses that in order to interact with other peers the peer 
needs to be connected to some kind of network (wired or wireless) such as, IP, 
Bluetooth, or Havi, among others (col.27, lines 31-35) and that peer-to-peer platform 
may be independent of transport protocols (col. 33, lines 21-25). For example, the peer- 
to-peer platform may be implemented on top of TCP/IP, HTTP, Bluetooth, HomePNA 
and other protocols. 
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Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teaching of Roy with Yeager to teach a Bluetooth network because in order 
to interact with other peers the peer needs to be connected to some kind of network 
(wired or wireless) such as Bluetooth (col. 27, lines 31-35) and peer-to-peer platform 
may be independent of transport protocols that may be implemented on top Bluetooth 
(col.33, lines 21-25). 

As per claim 34: Roy discloses an a wireless network invention (col. 5, lines 50-60) 
that uses Elliptic Curve DSA to prevent forgery and Diffie-Hellman key agreement 
scheme (col.9 f lines 33-35 and col.10, lines 1-3). However, Roy fails to mention the 
network be one of a Bluetooth network. 

Yeager discloses Embodiments of a decentralized, distributed trust mechanism 
are described that may be used in various networking platforms, including, but not 
limited to, peer-to-peer and other decentralized networking platforms. The mechanism 
may be used, among other things, to implement trust relationships between and among 
peers and to implement trust relationships between peers and content and data (col. 2, 
lines 44-50). Roy discusses the peer-to-peer platform may be independent of specific 
security approaches where the peer-to-peer platform may provide a comprehensive set 
of security primitives to support the security solutions used by various peer-to-peer 
platform services and applications. Embodiments of the peer-to-peer platform may 
provide one or more security primitives including, but not limited to: A simple crypto 
library supporting hash functions (e.g. MD5), symmetric encryption algorithms (e.g. 
RC4), and asymmetric crypto algorithms (e.g., Diffie-Hellman and RSA) (col. 58, line 61 
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- col. 57, line 4). Roy further discloses that in order to interact with other peers the peer 
needs to be connected to some kind of network (wired or wireless) such as, IP, 
Bluetooth, or Havi, among others (col. 27, lines 31-35) and that peer-to-peer platform 
may be independent of transport protocols (col. 33, lines 21-25). For example, the peer- 
to-peer platform may be implemented on top of TCP/IP, HTTP, Bluetooth, HomePNA 
and other protocols. 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teaching of Roy with Yeager to teach a Bluetooth network because in order 
to interact with other peers the peer needs to be connected to some kind of network 
(wired or wireless) such as Bluetooth (col.27, lines 31-35) and peer-to-peer platform 
may be independent of transport protocols that may be implemented on top Bluetooth 
(col.33, lines 21-25). 

As per claim 35: Roy discloses an a wireless network invention (col. 5, lines 50-60) 
that uses Elliptic Curve DSA to prevent forgery and Diffie-Hellman key agreement 
scheme (col.9, lines 33-35 and col.10, lines 1-3). However, Roy fails to mention the 
network be one of a Bluetooth network. 

Yeager discloses Embodiments of a decentralized, distributed trust mechanism 
are described that may be used in various networking platforms, including, but not 
limited to, peer-to-peer and other decentralized networking platforms. The mechanism 
may be used, among other things, to implement trust relationships between and among 
peers and to implement trust relationships between peers and content and data (col. 2, 
lines 44-50). Roy discusses the peer-to-peer platform may be independent of specific 
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security approaches where the peer-to-peer platform may provide a comprehensive set 
of security primitives to support the security solutions used by various peer-to-peer 
platform services and applications. Embodiments of the peer-to-peer platform may 
provide one or more security primitives including, but not limited to: A simple crypto 
library supporting hash functions (e.g. MD5), symmetric encryption algorithms (e.g. 
RC4), and asymmetric crypto algorithms (e.g., Diffie-Hellman and RSA) (col. 58, line 61 
- col. 57, line 4). Roy further discloses that in order to interact with other peers the peer 
needs to be connected to some kind of network (wired or wireless) such as, IP, 
Bluetooth, or Havi, among others (col.27, lines 31-35) and that peer-to-peer platform 
may be independent of transport protocols (col. 33, lines 21-25). For example, the 
peer-to-peer platform may be implemented on top of TCP/IP, HTTP, Bluetooth, 
HomePNA and other protocols. 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the teaching of Roy with Yeager to teach a Bluetooth network because in 
order to interact with other peers the peer needs to be connected to some kind of 
network (wired or wireless) such as Bluetooth (col.27, lines 31-35) and peer-to-peer 
platform may be independent of transport protocols that may be implemented on top 
Bluetooth (col.33, lines 21-25). 
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Response to Arguments 

6. Applicant's arguments with respect to claims 1-35 have been considered but are 
moot in view of the new ground(s) of rejection. 

Conclusion 

7. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 

§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to LEYNNA T. HA whose telephone number is (571) 272-3851. The 
examiner can normally be reached on Monday - Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571 ) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



LHa 




HOSUK SONG 
PRIMARY EXAMINER 



